https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:23:06.250271+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01294 bdu:2021-01294 2026-10-03T13:23:06.321678+00:00 bdu:2021-01294 https://cve.radiocsirt.org/vuln/cnvd-2016-02265 cnvd-2016-02265 2026-10-03T13:23:06.321728+00:00 cnvd-2016-02265 https://cve.radiocsirt.org/vuln/euvd-2026-82767 EUVD-2026-82767 2026-10-03T13:23:06.321743+00:00 EUVD-2026-82767 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2110 fkie_cve-2016-2110 2026-10-03T13:23:06.321755+00:00

The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.

 https://cve.radiocsirt.org/vuln/ghsa-59r3-hh3x-g9v9 GHSA-59r3-hh3x-g9v9 2026-10-03T13:23:06.321785+00:00

The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.

 https://cve.radiocsirt.org/vuln/gsd-2016-2110 gsd-2016-2110 2026-10-03T13:23:06.321802+00:00 gsd-2016-2110 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10069-1 openSUSE-SU-2024:10069-1 — ctdb-4.5.0-1.1 on GA media 2026-10-03T13:23:06.321813+00:00

ctdb-4.5.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2016:0611 RHSA-2016:0611 — Red Hat Security Advisory: samba security update 2026-10-03T13:23:06.321866+00:00

samba: crash in dcesrv_auth_bind_ack due to missing error check samba: Man-in-the-middle attacks possible with NTLMSSP authentication samba: Spoofing vulnerability when domain controller is configured samba: Missing downgrade detection samba: Smb signing not required by default when smb client connection is used for ipc usage samba: SAMR and LSA man in the middle attacks

 https://cve.radiocsirt.org/vuln/suse-ru-2016:1478-1 SUSE-RU-2016:1478-1 — Recommended update for samba 2026-10-03T13:23:06.321892+00:00

Recommended update for samba

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2110 UBUNTU-CVE-2016-2110 2026-10-03T13:23:06.321908+00:00

Affected: Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba

The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.